Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bfb267fc-35fb-3df6-b582-2fcb9989cd97.roa
File: bfb267fc-35fb-3df6-b582-2fcb9989cd97.roa (raw, json)
Hash identifier: 5ApGEXrrcWAr96UW2RqO170MHw4h8rZmMUaO3hwCtFk=
Subject key identifier: 4E:78:F1:2A:76:71:8C:79:59:CC:65:D5:0B:A9:46:1E:46:58:3A:4F
Certificate issuer: /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial: 010D0C9F43285840B854616E6538CE92D9133900
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bfb267fc-35fb-3df6-b582-2fcb9989cd97.roa
Signing time: Fri 27 Jan 2023 12:00:00 +0000
ROA not before: Fri 27 Jan 2023 12:00:00 +0000
ROA not after: Sat 04 Mar 2023 05:00:00 +0000
asID: 8987
IP address blocks: 18.204.0.0/14 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:b8:54:61:6e:65:38:ce:92:d9:13:39:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Validity
Not Before: Jan 27 12:00:00 2023 GMT
Not After : Mar 4 05:00:00 2023 GMT
Subject: CN=be3d20af-16a3-40b0-b24e-0f862af8d36e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ef:c6:da:6d:49:cd:8b:17:ae:06:e2:32:6f:
8f:d6:b1:7d:3a:c3:43:aa:0c:84:fa:60:bf:9b:09:
f4:b4:9c:71:27:31:67:b3:3a:6d:f6:e1:10:39:a4:
3b:9d:93:ac:f9:0a:42:80:ab:fb:8e:45:4c:20:8c:
df:36:3a:ad:61:8c:74:17:51:8e:1d:7f:61:59:b2:
af:44:79:c5:14:69:be:f3:9f:14:0a:60:1a:40:98:
69:f5:e7:27:87:62:22:8d:ae:8c:1b:5d:ca:52:96:
ca:fe:6f:e0:f1:9d:50:2b:5b:0f:5f:a3:05:1a:52:
55:88:a6:12:e6:03:59:94:8b:84:ab:38:d5:b4:2d:
6f:04:cf:3c:37:3e:f3:33:28:37:c9:6e:6b:63:b8:
8e:f2:93:3d:99:94:ba:b8:1f:28:de:00:2b:5b:53:
40:7a:ce:d6:d4:ef:e8:8c:0d:db:b6:7e:f9:57:2c:
f6:64:00:da:6c:fa:16:94:65:46:8a:7f:9b:d3:19:
4c:0f:6f:1c:8e:8e:66:4d:2e:a0:b4:f3:aa:67:b1:
59:6d:6a:45:2c:88:b1:63:7b:d2:8b:d4:0f:53:87:
57:a4:73:90:ea:83:77:d8:1e:45:59:5b:53:ba:96:
e5:db:cb:bf:db:80:ab:12:82:16:6a:33:16:c3:40:
31:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:78:F1:2A:76:71:8C:79:59:CC:65:D5:0B:A9:46:1E:46:58:3A:4F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/bfb267fc-35fb-3df6-b582-2fcb9989cd97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl
X509v3 Authority Key Identifier:
keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
sbgp-ipAddrBlock: critical
IPv4:
18.204.0.0/14
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:e4:21:5b:49:1a:6b:1a:0f:1f:ab:f8:d8:59:48:a9:e9:76:
2d:4a:ab:7f:7a:24:a2:66:9f:1e:d5:34:17:57:d7:cd:22:3f:
f9:ab:9d:ea:2d:33:37:4d:b7:17:4c:68:ae:f3:d9:0d:fb:48:
af:14:7d:40:c8:1e:ce:05:4d:ac:d1:84:10:87:ff:28:51:6f:
c6:69:26:e4:a7:07:da:33:19:60:fc:99:38:04:83:53:13:85:
a8:c1:c0:a0:b9:2d:75:72:29:82:8e:c7:a7:5a:f2:bf:af:23:
be:f5:86:e8:15:58:b6:a8:0a:08:b5:ed:12:56:0b:c4:1c:95:
70:94:b2:22:83:a7:1f:7d:8c:ae:5c:99:f9:df:29:95:95:ec:
6a:2f:9b:d1:4c:18:16:61:5b:98:4e:02:8e:d1:c6:e2:1d:39:
fe:43:6b:07:6e:1e:7e:12:64:97:99:31:e1:ed:d2:bd:01:6d:
43:21:20:a0:cf:00:80:85:26:c1:df:b7:e0:22:12:4e:d8:1c:
c9:cd:91:ab:40:92:b6:32:87:70:26:e6:b3:12:c6:cf:e3:c4:
d0:d7:b4:7c:ad:ce:b6:5f:e4:90:02:9e:45:65:e5:fb:ed:ba:
0d:82:a3:fe:dd:8b:ff:ed:65:ae:2d:b9:80:f0:0a:4e:b1:b5:
1f:fa:e1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:16 2023 by rpki-client on console-ams.rpki-client.org